title: CVE-2010-0944 Exploitation Attempt
id: 55d082fa-118a-4649-8e06-bf342de0ba84
author: Subhash Popuri (@pbssubhash)
date: 2021/08/25
status: experimental
description: Joomla! Component com_jcollection - Directory Traversal:Directory traversal
  vulnerability in the JCollection (com_jcollection) component for Joomla! allows
  remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter
  to index.php.
references:
  - https://github.com/projectdiscovery/nuclei-templates
logsource:
  category: webserver
detection:
  selection:
    c-uri|contains:
      - /index.php?option=com_jcollection&controller=../../../../../../../etc/passwd%00
  condition: selection
false_positives:
  - Scanning from Nuclei
  - Penetration Testing Activity
  - Unknown
tags:
  - attack.initial_access
  - attack.t1190
level: critical